CVE-2024-11620

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Nov 28, 2024
CWE ID 94

Summary

CVE-2024-11620 is a Code Injection vulnerability affecting the Rank Math SEO plugin. An attacker can exploit this vulnerability to inject malicious code, potentially leading to unauthorized access or data theft. The issue is found in the plugin's code generation process and affects all versions from n/a through 1.0.231. It is crucial that users update their Rank Math SEO plugin to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share